WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
o2s-gallery
Published
2014-08-01
Title
o2s-gallery - Cross Site Scripting
Slug
o2tweet
Published
2014-12-15
Title
O2tweet <= 0.0.4 - Multiple CSRF
Slug
oa-social-login
Published
2024-11-22
Title
Social Login < 5.10.0 - Authentication Bypass
Slug
oauth-client
Published
2022-06-21
Title
OAuth 2.0 client for SSO < 1.11.4 - Authenticated Bypass
Slug
oauth-client-for-user-authentication
Published
2022-09-05
Title
OAuth client Single Sign On for WordPress < 3.0.4 - Unauthenticated Settings Update to Authentication Bypass
Slug
oauth-twitter-feed-for-developers
Published
2023-07-07
Title
oAuth Twitter Feed for Developers <= 2.3.0 - Admin+ Stored XSS
Slug
oauth2-provider
Published
2015-08-12
Title
WP OAuth Server <= 3.1.4 - Insecure Pseudor&om Number Generation
Slug
oauth2-provider
Published
2022-11-08
Title
WP OAuth Server < 4.2.2 - Admin+ Stored XSS
Slug
oauth2-provider
Published
2022-11-10
Title
WP OAuth Server < 3.4.2 - Client Secret Regeneration via CSRF
Slug
oauth2-provider
Published
2023-02-21
Title
WP OAuth Server < 4.2.5 - Arbitrary Post Deletion via CSRF
Slug
oauth2-provider
Published
2023-02-21
Title
WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion
Slug
oauth2-provider
Published
2024-04-05
Title
OAuth Server < 4.4.0 - Open Redirect
Slug
oauth2-server
Published
2022-07-18
Title
WP OAuth2 Server <= 1.0.1 - Authentication Bypass
Slug
obfuscate-email
Published
2024-08-08
Title
Obfuscate Email <= 3.8.1 - Unauthenticated Full Path Disclosure
Slug
oboxmedia-ads
Published
2025-10-21
Title
Oboxmedia Ads <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
occasions
Published
2014-08-01
Title
Occasions 1.0.4 - Manipulation CSRF
Slug
occasions
Published
2014-08-01
Title
Occasions 1.0.4 - occasions/occasions.php occ_content1 Parameter XSS
Slug
occupancyplan
Published
2025-04-24
Title
occupancyplan <= 1.0.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
occupancyplan
Published
2025-05-02
Title
occupancyplan <= 1.0.3.0 - Cross-Site Request Forgery to SQL Injection
Slug
ocean-extra
Published
2019-07-04
Title
Ocean Extra <= 1.5.8 - Unauthenticated Settings change and CSS injection
Slug
ocean-extra
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
ocean-extra
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ocean-extra
Published
2022-05-24
Title
Ocean Extra < 1.9.5 - Reflected Cross-Site Scripting
Slug
ocean-extra
Published
2022-10-10
Title
Ocean Extra < 2.0.5 - Admin+ PHP Objection Injection
Slug
ocean-extra
Published
2023-02-02
Title
Ocean Extra < 2.1.2 - Contributor+ Stored XSS